last executing test programs: 13.62712856s ago: executing program 4 (id=588): socket$inet6(0xa, 0x80002, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x10, 0x205}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x84}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|ui\xa2b\x8f\xee\x1c\xc5=^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$char_usb(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0xf02, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000020c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x300fff2) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000002200)=0xf1eb) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0080000000a8bf0af27f3a20e94d26b073f19fd746b3dfece9ff28ddbeae1fa56787", @ANYRES64=0x0, @ANYBLOB="01001000000000001c001a801800048014000a80080002"], 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) io_uring_enter(r4, 0xf, 0x7929, 0x1, 0x0, 0x0) 13.315137733s ago: executing program 3 (id=589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb7) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x190, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1535}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x400}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x37f}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0xffffffff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xc}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008050) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f2, &(0x7f0000003680)={'ip6tnl0\x00', &(0x7f0000003600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x7800, 0x0, 0x0, 0xffffffff}}) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008"], 0x1c}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x20000000) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000001c0), 0x795, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) recvmmsg(r3, &(0x7f00000077c0)=[{{0x0, 0xfffffffffffffd22, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) 11.888725689s ago: executing program 1 (id=591): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) execve(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000500)={[&(0x7f0000000200)='\x7f.@*\x00', &(0x7f0000000240)='/dev/v4l-subdev#\x00', &(0x7f0000000300)='*-^.]\xa6-{\x00', &(0x7f0000000380)='(\x00', &(0x7f00000003c0)='.]\x00', &(0x7f0000000400)='-)\\^\x00', &(0x7f0000000440)=']{\x92#}\\[$\x00', &(0x7f0000000480)='$.{*\'%\\#,\x00', &(0x7f00000004c0)='\xb2@+][^.-)@\x00']}, &(0x7f00000006c0)={[&(0x7f0000000540)='&\x00', &(0x7f0000000580)='{\x00', &(0x7f00000005c0)='\xff\xff', &(0x7f0000000600)='\x00', &(0x7f0000000640)='./}+-!d.+{\x00', &(0x7f0000000680)='\x00']}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/85, 0x55}, 0x2}], 0x1, 0x2122, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0xe00, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={r8, 0x1000, &(0x7f0000002a80)=""/4096}) unshare(0x2c020400) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1000000, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0xc0405627, &(0x7f0000000180)={0x3, 0x980900, 0x1}) setsockopt$inet6_udp_int(r9, 0x11, 0x66, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa000000c}) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {r9, 0xa8}, {r0, 0xf102}], 0x4, 0x8000007) 11.743334688s ago: executing program 4 (id=593): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/4090, 0xffa}, {&(0x7f0000001840)=""/74, 0x4a}, {&(0x7f0000001680)=""/70, 0x46}], 0x4}, 0x7}], 0x3, 0x12040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10.44918509s ago: executing program 4 (id=594): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x5, 0x0, [{0xffff2b63, 0x4, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x1006, 0x7f}}, {0x26, 0x3, 0x1, 0x0, @irqchip={0x6}}, {0x2, 0x5, 0x0, 0x0, @adapter={0x7fff, 0xfff, 0x1, 0x6943, 0x5}}, {0x8e, 0x2, 0x0, 0x0, @msi={0xdfe9, 0x1ba, 0x7, 0x9}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xa, 0xd0e0000, 0x138, 0x100, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffff00, 0xff, 'wlan1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, '\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x36, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x3202, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x4, 0x0, 0x6, 0xc], 0x5, 0x7a19653e03c56032}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@filename='./file0\x00', r4, &(0x7f0000001500)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc45"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 10.448176841s ago: executing program 0 (id=595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000300)='u', 0x1}], 0x2, 0x16, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35d"}, 0x32) write$UHID_INPUT(r9, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x100000, 0xa000, 0x1}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.447333504s ago: executing program 3 (id=596): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESDEC=r3], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r11], 0x1, r9, r10, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) fcntl$setpipe(r13, 0x407, 0x5) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 9.592710141s ago: executing program 2 (id=599): r0 = socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r3, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x5, 0x0, 0x97d, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xc000, 0x1, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000021c0)=0x4, 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x100) io_setup(0x1, &(0x7f00000016c0)=0x0) setrlimit(0xb, &(0x7f0000002200)={0x97, 0x80}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r6, r7, 0x0, 0x20000023896) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 9.413798302s ago: executing program 1 (id=600): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/4090, 0xffa}, {&(0x7f0000001840)=""/74, 0x4a}, {&(0x7f0000001680)=""/70, 0x46}], 0x4}, 0x7}], 0x3, 0x12040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 8.604504431s ago: executing program 3 (id=601): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) close(r4) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x120, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x11, 0xc, "ab948d211e0962ececdd2000ac"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xe5, 0xc, "bf785fc8aed94848f9891f8c1a52c938c21f09e1a7eb645fcb7638300b130b02bf5824077e41bc14f0eee17fffdde7b47a7a1c184f5b5550f8b3416451ff0a4da81aa1823a5764a25861ea548679dee3b4c3c9d4b2e01047d560fe58f0b0be925bf8cb7ceb1f861fa4a1ab96cba3241e9fc3daa265b23b65486aa0f5f0975e081add27e86c193ae837b63435b57d7ca5e3f63e8556da899cc5cb7f28a2cbae6b6ba6a4da5dcf987e16d00b6ef6d573c6fe6115d80485573d8ceb8e31f11d86a11a72a0a13a51369a82f0cf6db4937a58958c2b6bad172afc203da7c7a06f17b984"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELRULE={0x178, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_USERDATA={0x91, 0x7, 0x1, 0x0, "5f047cda3280e218a771ad09d08c9599244efaa0da1a7ce9bed0773d648899474257e22600dc0b1ade91b8f8831ea39a63adfb119956f19acf201f7a20f022a0325cc30ec29120e577478ac3b99e1acb64fe30feaa4210c49761aa7a977bd788e735177e51aeaf7cf7e103a602621d9a3e307b24960dbc9485b4c31ced8e1ff876b1b126e50ac6ab9e465eb175"}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_USERDATA={0xb3, 0x7, 0x1, 0x0, "5b1a57d953a761a413d2ef5a32d0501801d40af447db5f842727bbfdb7fb7ad8a860c75ce25b79416e6d3d0e0558bcef061b0ea674aa5bb7637af0297f063e007b93edf980b624cdec84c254cef42a511cb7999f559aee3a535ca383c31fd656c019fb38b9632ae6435b679b62abd9bf02d5cbe23e75739f3d29f5ef13b43ec5fa906c7d3f9b8881ab19a317c3ff90adf7d717973b1435bbb9a1649c588bd119e130c716d2977dc65ea5d1fa7abf66"}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x207, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0xa00, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x3d, 0x6, "124b35f5d093583e5b2cdda4bf3606bbaa001a8cdf30124fc56ba250bdc12655b1738fa82792ad9cff07152852f88b454b5f4e1a9042999c65"}]}, @NFT_MSG_DELOBJ={0x1b0, 0x14, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0xc, 0x8, "e7dcd6e3b9706974"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x92, 0x8, "4f6205c384edfb6418419a3ecac35735498c011feca5eb78dcc21b0ae73a99c8baa89bc1f7a9f1d8bc496459eb62976c99e3d34074b27dff779261055eb483f7f47d9d23133b6d4b5e37c76ae6516d01ebff676acad0e25c1504d668a8f78858cf79865e5c4afb253108b80a9ce7d289aaffb99fe5926fa9b2a7b0388d5a023628fa69a50f7df4b5443a1a829be3"}, @NFTA_OBJ_USERDATA={0xcb, 0x8, "517fea510acc251478681c3723b97403b949cb80ded03cb21cd9551760014e6dec7b25cae6a00fa9234c5f5779b7f9613c73b3f7998e3778fecc94196bc768c301f1a422af89d9c5aab6db5560e3b559e1d798c6b8a4f0aa0819863a281cac056b6220e26c4261f80cf2f65253daf2ce18f4c364ce115c608fbece9cf1c7a11c0fbf15464909b01161411d93ef5efb99ac0be953c772a94a738bb7b41fca24f7908b26e25a3de40fc22591e21c62f1138ac751c4c003d039af4bed79995df1bcca599c4c4710f1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWCHAIN={0x140, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd1, 0xc, "a9b5a1a95acb707d874b4615eae98f41d6ab7377a029e2f6b12e63aeadb272616f434766e191b5c314dc06887a17c0eb8fdd03b86eedbffba77511f71f32bea98f103061fd8b00db7a2b98a834479dd46098ae82ef644f859b73073fd4d6e9cf61a2f2485eafe4ea7047336973074f6e38b9eab4aaae0e93062cc21bfaf3e1c8a67d624075d10b36a66751de0f69b6acb3fb1c16eca97259d33f270bba4079bdb2a3b0f5934aed5b8d5de5450e181b2e8c172079f19ecd76bbe797973cf668c4b46adfd3621ef9b18ccb79e325"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6d0}, 0x1, 0x0, 0x0, 0x6004851}, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x78bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) sendfile(r7, r7, 0x0, 0x200000) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.66473734s ago: executing program 1 (id=602): r0 = socket(0x2d, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x6) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) lseek(r6, 0xffffffffffffc22f, 0x1) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vxcan1\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x9}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) 7.185498179s ago: executing program 2 (id=603): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x82000000) 5.520220028s ago: executing program 2 (id=604): socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x5, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0x2}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x200012, 0x10015, 0x9, 0xc0cc, 0x2, 0x8c, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioprio_get$uid(0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0d882dbd7000fdfc11250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) ioctl$BLKROSET(0xffffffffffffffff, 0x401070cd, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_pgetevents(r6, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040), 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_clone(0x2008480, 0x0, 0x0, 0x0, 0x0, 0x0) 5.519722964s ago: executing program 3 (id=605): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/4090, 0xffa}, {&(0x7f0000001840)=""/74, 0x4a}, {&(0x7f0000001680)=""/70, 0x46}], 0x4}, 0x7}], 0x3, 0x12040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.519445575s ago: executing program 4 (id=606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000008, 0x11, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000637000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4080) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.518862269s ago: executing program 0 (id=607): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) lsetxattr$security_capability(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300), &(0x7f0000000380)=@v3={0x3000000, [{0x7, 0x4}, {0x7, 0x7f}]}, 0x18, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, 0x0, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) shmdt(r3) poll(0x0, 0x0, 0x7) openat$dir(0xffffff9c, &(0x7f00000001c0)='./file2\x00', 0x121000, 0x110) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) fadvise64(r8, 0x4, 0x38, 0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) 4.345577289s ago: executing program 1 (id=608): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0xbd800005) sendto$inet(r1, 0x0, 0x0, 0x10008095, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000580)={0x11, 0x0, 0x2, 0x1}, 0x8) syz_emit_ethernet(0x75c, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x74e, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x73a, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c00000000000690780a0101020a010102070200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc3e70090780000fdf6fb05972d3e4a8611011ea07e39dc1d7758e8d5d0ba597c5973aa44beb3bec09ef853ce6b8e03fd20bb1fae91c71464c291f8b1e785826264b18126fccbccf1"], 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x884) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="020a", 0x2}, {0x0}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x40000000) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "839509236b3be31d378a26ab6748bfced81418803e5ad7fa11063ca43dd7"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "6c2cd3b6a7910e5cdf76122e96a1254c0d1ccc013907af7e6f8b"}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x8080) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x4020400) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x3, 0x3, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa3fae9c4e7e41e89}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x0, 0x6f, 0x0, 0x7fffffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x34}}, 0x20000010) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 4.006287813s ago: executing program 3 (id=609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESDEC=r3], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d001e1ff200001000000000004000000ff71f5d8d21046232f00000000000001fc020000e2ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r11], 0x1, r9, r10, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) fcntl$setpipe(r13, 0x407, 0x5) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 3.962267753s ago: executing program 0 (id=610): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fsopen(&(0x7f0000000100)='ntfs3\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x48, 0x0, &(0x7f0000000680)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c0400000000000000544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67e2e658d909c5", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) close(r4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="d0000020b804000000a67dcb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000001000000000000000001000029fd71a69d3295d8"], 0x48}, 0x2}, 0x0) openat$btrfs_control(0xffffff9c, 0x0, 0x20642, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000000400", @ANYBLOB="01010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) 3.400684401s ago: executing program 4 (id=611): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESDEC=r3], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r11], 0x1, r9, r10, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) fcntl$setpipe(r13, 0x407, 0x5) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 3.314789138s ago: executing program 1 (id=612): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/4090, 0xffa}, {&(0x7f0000001840)=""/74, 0x4a}, {&(0x7f0000001680)=""/70, 0x46}], 0x4}, 0x7}], 0x3, 0x12040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 3.005673149s ago: executing program 2 (id=613): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x101040) ioctl$FS_IOC_GETFSLABEL(r0, 0x40086f52, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x7bfff7b7, &(0x7f0000000300)={0xa, 0x4e20, 0xffffbfff, @mcast1}, 0x1c) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x1, 0x80000001, 0x2, 0x7, 0x3, 0x258, 0x4}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000380)={"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"}) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000100)=0x6, 0x4) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\\\o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x91\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) close(r4) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x120, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x11, 0xc, "ab948d211e0962ececdd2000ac"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xe5, 0xc, "bf785fc8aed94848f9891f8c1a52c938c21f09e1a7eb645fcb7638300b130b02bf5824077e41bc14f0eee17fffdde7b47a7a1c184f5b5550f8b3416451ff0a4da81aa1823a5764a25861ea548679dee3b4c3c9d4b2e01047d560fe58f0b0be925bf8cb7ceb1f861fa4a1ab96cba3241e9fc3daa265b23b65486aa0f5f0975e081add27e86c193ae837b63435b57d7ca5e3f63e8556da899cc5cb7f28a2cbae6b6ba6a4da5dcf987e16d00b6ef6d573c6fe6115d80485573d8ceb8e31f11d86a11a72a0a13a51369a82f0cf6db4937a58958c2b6bad172afc203da7c7a06f17b984"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELRULE={0x178, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_USERDATA={0x91, 0x7, 0x1, 0x0, "5f047cda3280e218a771ad09d08c9599244efaa0da1a7ce9bed0773d648899474257e22600dc0b1ade91b8f8831ea39a63adfb119956f19acf201f7a20f022a0325cc30ec29120e577478ac3b99e1acb64fe30feaa4210c49761aa7a977bd788e735177e51aeaf7cf7e103a602621d9a3e307b24960dbc9485b4c31ced8e1ff876b1b126e50ac6ab9e465eb175"}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_USERDATA={0xb3, 0x7, 0x1, 0x0, "5b1a57d953a761a413d2ef5a32d0501801d40af447db5f842727bbfdb7fb7ad8a860c75ce25b79416e6d3d0e0558bcef061b0ea674aa5bb7637af0297f063e007b93edf980b624cdec84c254cef42a511cb7999f559aee3a535ca383c31fd656c019fb38b9632ae6435b679b62abd9bf02d5cbe23e75739f3d29f5ef13b43ec5fa906c7d3f9b8881ab19a317c3ff90adf7d717973b1435bbb9a1649c588bd119e130c716d2977dc65ea5d1fa7abf66"}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x207, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0xa00, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x3d, 0x6, "124b35f5d093583e5b2cdda4bf3606bbaa001a8cdf30124fc56ba250bdc12655b1738fa82792ad9cff07152852f88b454b5f4e1a9042999c65"}]}, @NFT_MSG_DELOBJ={0x1b0, 0x14, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0xc, 0x8, "e7dcd6e3b9706974"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x92, 0x8, "4f6205c384edfb6418419a3ecac35735498c011feca5eb78dcc21b0ae73a99c8baa89bc1f7a9f1d8bc496459eb62976c99e3d34074b27dff779261055eb483f7f47d9d23133b6d4b5e37c76ae6516d01ebff676acad0e25c1504d668a8f78858cf79865e5c4afb253108b80a9ce7d289aaffb99fe5926fa9b2a7b0388d5a023628fa69a50f7df4b5443a1a829be3"}, @NFTA_OBJ_USERDATA={0xcb, 0x8, "517fea510acc251478681c3723b97403b949cb80ded03cb21cd9551760014e6dec7b25cae6a00fa9234c5f5779b7f9613c73b3f7998e3778fecc94196bc768c301f1a422af89d9c5aab6db5560e3b559e1d798c6b8a4f0aa0819863a281cac056b6220e26c4261f80cf2f65253daf2ce18f4c364ce115c608fbece9cf1c7a11c0fbf15464909b01161411d93ef5efb99ac0be953c772a94a738bb7b41fca24f7908b26e25a3de40fc22591e21c62f1138ac751c4c003d039af4bed79995df1bcca599c4c4710f1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWCHAIN={0x140, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd1, 0xc, "a9b5a1a95acb707d874b4615eae98f41d6ab7377a029e2f6b12e63aeadb272616f434766e191b5c314dc06887a17c0eb8fdd03b86eedbffba77511f71f32bea98f103061fd8b00db7a2b98a834479dd46098ae82ef644f859b73073fd4d6e9cf61a2f2485eafe4ea7047336973074f6e38b9eab4aaae0e93062cc21bfaf3e1c8a67d624075d10b36a66751de0f69b6acb3fb1c16eca97259d33f270bba4079bdb2a3b0f5934aed5b8d5de5450e181b2e8c172079f19ecd76bbe797973cf668c4b46adfd3621ef9b18ccb79e325"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6d0}, 0x1, 0x0, 0x0, 0x6004851}, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x78bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) sendfile(r7, r7, 0x0, 0x200000) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.177378021s ago: executing program 3 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000300)='u', 0x1}], 0x2, 0x16, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35d"}, 0x32) write$UHID_INPUT(r9, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x100000, 0xa000, 0x1}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.675786514s ago: executing program 1 (id=616): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) timer_create(0xfe44b783c3560b5e, 0x0, &(0x7f0000001800)) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={&(0x7f00000019c0)=[{0x3, 0x0, 0x0, 0x0}, {0xc, 0x201, 0x0, 0x0}, {0xc, 0x2401, 0x50, &(0x7f0000000900)="30dc48cb46e4208a59b26684ac5005119c2e6dfd62832df910de4fc14cee9811bf98ce9ae05613e5a5075d9f488f08a382186f070406023c5e7ba0f4a501cc464894ce9a53acd85de44063553342a2b2"}], 0x3}) ioctl$EVIOCRMFF(r5, 0x40085507, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000301010100000000000000000a0000000c00198008000280"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) 1.674897142s ago: executing program 0 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000001c0)}, 0x7}], 0x3, 0x12040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.553767592s ago: executing program 4 (id=617): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) memfd_secret(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x4000900, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84000000907800040a0300000005d58838000000"], 0x4e) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x2, 0x0, &(0x7f00000001c0)) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, 0x0, 0x0) bind$pptp(r6, &(0x7f0000000340)={0x18, 0x2, {0x1, @remote}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r7, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4dc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x9, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0xa0, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x0, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x7, 0x5, 0x80000001, 0x8, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x4, 0xfffffc00, 0x1, 0x4, 0xffff0001, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x0, 0x9, 0x7, 0x590, 0x10000000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x5, 0x2, 0x8, 0x8, 0x7ff, 0x4, 0x2170, 0x0, 0x2, 0x1, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x1, 0x5, 0x1, 0x0, 0x7, 0x9, 0x6, 0x1, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2, 0x4, 0x8, 0x9, 0xf, 0x0, 0x80000000, 0x0, [@sadb_address={0x3, 0x6, 0x2b, 0x0, 0x0, @in={0x2, 0x4, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x2}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbc, 0x5, {0x6, 0x32, 0x4, 0x4, 0x0, 0x8, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}}]}, 0x78}, 0x1, 0x7}, 0x20048080) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) setresuid(0xee01, 0xee00, 0x0) 732.049185ms ago: executing program 0 (id=618): openat$kvm(0xffffffffffffff9c, 0x0, 0x280540, 0x0) r0 = getpgrp(0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100c00) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$dsp(r3, 0x0, 0xfffffe59) ppoll(&(0x7f0000001080)=[{r2, 0x1026}], 0x1, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) close(r4) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9}) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r7, &(0x7f0000001040)={0x0, 0x80}, &(0x7f000009de80), 0x0) close_range(r2, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x9) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x34020000) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0xb, 0x200, 0x38e41e62, 0x64}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000001000)={0x4, 0x8002, 0xffff7fff, 0xda9a}) 279.393961ms ago: executing program 0 (id=619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESDEC=r3], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r11], 0x1, r9, r10, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) fcntl$setpipe(r13, 0x407, 0x5) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 0s ago: executing program 2 (id=620): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) lsetxattr$security_capability(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300), &(0x7f0000000380)=@v3={0x3000000, [{0x7, 0x4}, {0x7, 0x7f}]}, 0x18, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, 0x0, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) shmdt(r3) poll(0x0, 0x0, 0x7) openat$dir(0xffffff9c, &(0x7f00000001c0)='./file2\x00', 0x121000, 0x110) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) fadvise64(r8, 0x4, 0x38, 0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) kernel console output (not intermixed with test programs): 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 98.944401][ T10] usb 5-1: USB disconnect, device number 3 [ 99.005877][ T10] usblp0: removed [ 99.279727][ T6019] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 99.286519][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.320721][ T6019] vhci_hcd vhci_hcd.0: Device attached [ 99.369631][ T6022] usbip_core: unknown command [ 99.380341][ T6022] vhci_hcd: unknown pdu 808464432 [ 99.394961][ T6022] usbip_core: unknown command [ 99.426485][ T57] vhci_hcd vhci_hcd.2: stop threads [ 99.448670][ T57] vhci_hcd vhci_hcd.2: release socket [ 99.462229][ T57] vhci_hcd vhci_hcd.2: disconnect device [ 99.517707][ T5619] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 99.555016][ T6014] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 99.584980][ T5705] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 99.606902][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.766841][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 99.778672][ T24] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 99.808401][ T24] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.841708][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 99.878839][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 99.891668][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.913355][ T24] usb 3-1: Product: syz [ 99.927907][ T24] usb 3-1: Manufacturer: syz [ 99.941820][ T24] usb 3-1: SerialNumber: syz [ 100.269335][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 100.310218][ T4978] bcm5974 3-1:1.0: could not read from device [ 100.319662][ T4978] bcm5974 3-1:1.0: could not read from device [ 100.333336][ T4978] bcm5974 3-1:1.0: could not read from device [ 100.362907][ T24] usb 3-1: USB disconnect, device number 2 [ 100.389359][ T4978] bcm5974 3-1:1.0: could not read from device [ 100.519583][ T5630] udevd[5630]: Error opening device "/dev/input/event4": No such file or directory [ 100.607225][ T5630] udevd[5630]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.693205][ T5630] udevd[5630]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.716597][ T5630] udevd[5630]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.745970][ T5630] udevd[5630]: Unable to EVIOCGABS device "/dev/input/event4" [ 100.880546][ T6030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.58'. [ 103.061638][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.099525][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.305104][ T6079] vivid-003: ================= START STATUS ================= [ 103.305132][ T6079] vivid-003: Radio HW Seek Mode: Bounded [ 103.305150][ T6079] vivid-003: Radio Programmable HW Seek: false [ 103.305163][ T6079] vivid-003: RDS Rx I/O Mode: Block I/O [ 103.305175][ T6079] vivid-003: Generate RBDS Instead of RDS: false [ 103.305188][ T6079] vivid-003: RDS Reception: true [ 103.305206][ T6079] vivid-003: RDS Program Type: 0 inactive [ 103.305221][ T6079] vivid-003: RDS PS Name: inactive [ 103.305235][ T6079] vivid-003: RDS Radio Text: inactive [ 103.305249][ T6079] vivid-003: RDS Traffic Announcement: false inactive [ 103.305264][ T6079] vivid-003: RDS Traffic Program: false inactive [ 103.305279][ T6079] vivid-003: RDS Music: false inactive [ 103.305294][ T6079] vivid-003: ================== END STATUS ================== [ 104.117154][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.267951][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 104.284410][ T24] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.305359][ T24] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.358989][ T24] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.397399][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.417975][ T6091] netlink: 14 bytes leftover after parsing attributes in process `syz.3.71'. [ 104.430687][ T24] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 104.443839][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.470828][ T24] usb 3-1: Product: syz [ 104.482799][ T24] usb 3-1: Manufacturer: syz [ 104.510452][ T24] usb 3-1: SerialNumber: syz [ 104.731581][ T6091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.783511][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 104.808160][ T6091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.859362][ T10] usb 3-1: USB disconnect, device number 3 [ 104.893146][ T10] usblp0: removed [ 104.969128][ T6091] bond0 (unregistering): Released all slaves [ 105.561783][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 105.584698][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 105.725365][ T6093] team0: entered promiscuous mode [ 105.736968][ T6093] team_slave_0: entered promiscuous mode [ 105.744754][ T6093] team_slave_1: entered promiscuous mode [ 105.753715][ T6093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 105.800414][ T6093] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 106.186846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 109.990945][ T6159] loop5: detected capacity change from 0 to 7 [ 110.023305][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.052052][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.061284][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 110.099831][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.109052][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 110.124987][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.134182][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 110.143922][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 110.154948][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.164138][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 110.174373][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.183556][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 110.250755][ T6159] Cannot find del_set index 0 as target [ 110.658059][ T6157] team0: Port device team_slave_1 removed [ 110.837638][ T6178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.89'. [ 110.866686][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.877869][ T6178] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 110.902939][ T6180] netlink: 14 bytes leftover after parsing attributes in process `syz.2.87'. [ 110.986189][ T6181] ipvlan2: entered allmulticast mode [ 111.005199][ T6181] syz_tun: entered allmulticast mode [ 111.036879][ T5714] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.207118][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 111.214446][ T6180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.233084][ T5714] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.257492][ T5714] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.285372][ T6180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.301236][ T5714] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.340436][ T5714] usb 2-1: config 1 interface 0 has no altsetting 0 [ 111.350404][ T6180] bond0 (unregistering): Released all slaves [ 111.386554][ T5714] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 111.408851][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.440906][ T5714] usb 2-1: Product: syz [ 111.459465][ T5714] usb 2-1: Manufacturer: syz [ 111.483910][ T5714] usb 2-1: SerialNumber: syz [ 111.759142][ T5714] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 111.846051][ T5714] usb 2-1: USB disconnect, device number 4 [ 111.912313][ T5714] usblp0: removed [ 112.811950][ T6198] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 113.156856][ T5619] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.367126][ T5619] usb 4-1: Using ep0 maxpacket: 8 [ 113.396897][ T5619] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 113.431034][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.578795][ T5619] pvrusb2: Hardware description: Terratec Grabster AV400 [ 113.614098][ T5619] pvrusb2: ********** [ 113.634994][ T5619] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 113.701225][ T5619] pvrusb2: Important functionality might not be entirely working. [ 113.712526][ T6205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.91'. [ 113.740761][ T5619] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 113.784046][ T5619] pvrusb2: ********** [ 113.804441][ T2362] pvrusb2: Invalid write control endpoint [ 114.113326][ T2362] pvrusb2: Invalid write control endpoint [ 114.148175][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 114.164055][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 114.164071][ T29] audit: type=1326 audit(1777300101.812:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.238680][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 114.273998][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 114.315572][ T29] audit: type=1326 audit(1777300101.852:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.357015][ T2362] pvrusb2: Device being rendered inoperable [ 114.383507][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 114.426676][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 114.475069][ T29] audit: type=1326 audit(1777300101.862:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.518701][ T2362] pvrusb2: Attached sub-driver cx25840 [ 114.550604][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 114.601038][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 114.638663][ T29] audit: type=1326 audit(1777300101.862:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.689229][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 114.702929][ T29] audit: type=1326 audit(1777300101.862:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.728651][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 114.771825][ T29] audit: type=1326 audit(1777300101.862:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.826297][ T29] audit: type=1326 audit(1777300101.872:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.859512][ T29] audit: type=1326 audit(1777300101.872:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 114.962777][ T29] audit: type=1326 audit(1777300101.872:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 115.036888][ T29] audit: type=1326 audit(1777300101.872:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 115.900937][ T9] usb 4-1: USB disconnect, device number 3 [ 116.589257][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 116.725447][ T6236] netlink: 'syz.2.102': attribute type 23 has an invalid length. [ 116.977002][ T6241] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.102'. [ 116.986546][ T6241] veth0_to_bond: default FDB implementation only supports local addresses [ 117.155108][ T6243] netlink: 14 bytes leftover after parsing attributes in process `syz.4.103'. [ 117.241180][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.303184][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.375791][ T6243] bond0 (unregistering): Released all slaves [ 118.487212][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 118.529753][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 120.065210][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.110'. [ 120.116728][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 121.885101][ T6305] fuse: root generation should be zero [ 122.144226][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 122.195624][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 122.799920][ T6319] loop5: detected capacity change from 0 to 7 [ 122.814229][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.826994][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.836189][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 122.852848][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.862044][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 122.895179][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.904394][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 122.913654][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.922888][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 122.933928][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.943104][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 123.004459][ T6330] SET target dimension over the limit! [ 124.691567][ T6344] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 124.714813][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 124.750588][ T6349] ip6erspan0: entered promiscuous mode [ 125.172867][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 125.224954][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 126.643529][ T6378] loop5: detected capacity change from 0 to 7 [ 126.656724][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.678662][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.687855][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 126.701584][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.710793][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 126.724792][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.733988][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 126.743860][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 126.752882][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 126.815398][ T6378] SET target dimension over the limit! [ 126.817102][ T6375] syzkaller0: entered promiscuous mode [ 126.844289][ T6375] syzkaller0: entered allmulticast mode [ 127.274622][ T6388] netlink: 'syz.1.134': attribute type 23 has an invalid length. [ 127.520543][ T6393] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.134'. [ 127.582928][ T6393] veth0_to_bond: default FDB implementation only supports local addresses [ 128.458166][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 128.517574][ T6401] netlink: 277 bytes leftover after parsing attributes in process `syz.1.138'. [ 128.570226][ T6401] netlink: 277 bytes leftover after parsing attributes in process `syz.1.138'. [ 128.679644][ T6401] usb usb8: usbfs: process 6401 (syz.1.138) did not claim interface 0 before use [ 128.813505][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 129.034094][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 129.076907][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 129.106906][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.277049][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 129.301245][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.316081][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.345298][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.377095][ T24] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 129.396374][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.422059][ T24] usb 2-1: Product: syz [ 129.435272][ T24] usb 2-1: Manufacturer: syz [ 129.448343][ T24] usb 2-1: SerialNumber: syz [ 129.522990][ T6408] bridge1: port 1(veth3) entered blocking state [ 129.549398][ T6408] bridge1: port 1(veth3) entered disabled state [ 129.564286][ T6408] veth3: entered allmulticast mode [ 129.606921][ T6408] veth3: entered promiscuous mode [ 129.695901][ T24] usb 2-1: cannot find UAC_HEADER [ 129.794670][ T6413] bridge1: port 2(veth0_to_bond) entered blocking state [ 129.820509][ T6413] bridge1: port 2(veth0_to_bond) entered disabled state [ 129.833907][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 129.853499][ T6413] veth0_to_bond: entered allmulticast mode [ 129.891241][ T6413] veth0_to_bond: entered promiscuous mode [ 129.900908][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.962158][ T5684] usb 2-1: USB disconnect, device number 5 [ 130.029976][ T6416] bridge1: port 3(veth5) entered blocking state [ 130.043513][ T6416] bridge1: port 3(veth5) entered disabled state [ 130.052381][ T6416] veth5: entered allmulticast mode [ 130.068039][ T6416] veth5: entered promiscuous mode [ 130.690119][ T6425] loop5: detected capacity change from 0 to 7 [ 130.711286][ C1] blk_print_req_error: 2 callbacks suppressed [ 130.711298][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.740062][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.749256][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 130.758620][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.767839][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 130.801724][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.810901][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 130.817366][ T6432] Cannot find del_set index 0 as target [ 130.835695][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.844871][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 130.861994][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.871201][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 130.966684][ T6433] netlink: 14 bytes leftover after parsing attributes in process `syz.1.143'. [ 131.200802][ T6433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.321126][ T6433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.434422][ T6433] bond0 (unregistering): Released all slaves [ 131.440218][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 132.851380][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860963][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.681245][ T6442] team0: Port device team_slave_1 removed [ 134.053187][ T6485] syzkaller0: entered promiscuous mode [ 134.071701][ T6485] syzkaller0: entered allmulticast mode [ 134.776593][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 135.096964][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.314667][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 135.399838][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.454729][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 135.856120][ T6502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.157'. [ 135.880359][ T6502] netlink: 260 bytes leftover after parsing attributes in process `syz.1.157'. [ 135.953022][ T6505] loop5: detected capacity change from 0 to 7 [ 136.016507][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.026840][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.040753][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.049960][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.062704][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.071939][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.082052][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.091251][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.103555][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.112716][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.126376][ T6505] SET target dimension over the limit! [ 136.132883][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.142042][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.130952][ T6524] syz.4.162 (6524): drop_caches: 4 [ 137.788341][ T6528] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 138.126688][ T9] usb 2-1: string descriptor 0 read error: -71 [ 138.143015][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.159826][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.183942][ T9] usb 2-1: can't set config #1, error -71 [ 138.302459][ T9] usb 2-1: USB disconnect, device number 6 [ 140.296689][ T6558] loop5: detected capacity change from 0 to 7 [ 140.316535][ T6560] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 140.338602][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.372603][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.381772][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 140.398217][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.407423][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 140.430806][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 140.439933][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 140.455795][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 140.507574][ T6558] Cannot find del_set index 0 as target [ 140.739179][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 141.150867][ T6565] team_slave_1 (unregistering): left promiscuous mode [ 141.169412][ T6565] team0: Port device team_slave_1 removed [ 145.695310][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 145.988810][ T6627] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 146.124612][ T6624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.130473][ T6621] block device autoloading is deprecated and will be removed. [ 147.586935][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.758705][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 147.803210][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.849662][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.912165][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 147.992238][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.008775][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.037694][ T9] usb 1-1: Manufacturer: syz [ 148.056365][ T9] usb 1-1: config 0 descriptor?? [ 148.512585][ T9] hid_parser_main: 27 callbacks suppressed [ 148.512600][ T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 148.601843][ T9] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 150.099002][ T5714] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 150.262530][ T6693] netlink: 'syz.3.196': attribute type 15 has an invalid length. [ 150.745915][ T6681] netlink: 'syz.0.189': attribute type 12 has an invalid length. [ 150.888376][ T5619] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.088498][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 151.116022][ T5619] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.159641][ T5619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.196104][ T5619] usb 4-1: config 0 has no interface number 0 [ 151.230214][ T5619] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.277219][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.328432][ T5619] usb 4-1: Product: syz [ 151.342432][ T5619] usb 4-1: Manufacturer: syz [ 151.357869][ T5619] usb 4-1: SerialNumber: syz [ 151.383805][ T5619] usb 4-1: config 0 descriptor?? [ 151.400428][ T5619] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.679779][ T5619] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 151.686982][ T5619] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 151.972801][ T6715] syzkaller0: entered promiscuous mode [ 152.003406][ T6715] syzkaller0: entered allmulticast mode [ 152.046442][ T9] usb 1-1: USB disconnect, device number 3 [ 153.474986][ T24] usb 4-1: USB disconnect, device number 4 [ 154.359597][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.537014][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 154.584165][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.650839][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.699691][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 154.725694][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.750145][ T9] usb 1-1: Product: syz [ 154.770026][ T9] usb 1-1: Manufacturer: syz [ 154.787882][ T9] usb 1-1: SerialNumber: syz [ 154.814665][ T9] usb 1-1: config 0 descriptor?? [ 155.236881][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.438498][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 155.448873][ T9] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.460545][ T9] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.473138][ T9] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.494868][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 155.513270][ T9] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 155.534450][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.600552][ T9] usb 2-1: Product: syz [ 155.647103][ T9] usb 2-1: Manufacturer: syz [ 155.681695][ T9] usb 2-1: SerialNumber: syz [ 155.943583][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 156.201786][ T9] usb 2-1: USB disconnect, device number 7 [ 156.271864][ T9] usblp0: removed [ 157.286899][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.298313][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'. [ 157.352373][ T807] usb 1-1: USB disconnect, device number 4 [ 157.488668][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 157.495656][ T24] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 157.506538][ T24] usb 2-1: config 1 has no interface number 0 [ 157.521467][ T24] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.559973][ T6775] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 157.572759][ T24] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.608829][ T24] usb 2-1: config 1 interface 236 has no altsetting 0 [ 157.627242][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.634743][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.645615][ T24] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 157.654104][ T24] usb 2-1: config 1 has no interface number 0 [ 157.664437][ T24] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.720849][ T24] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.774954][ T24] usb 2-1: config 1 interface 236 has no altsetting 0 [ 157.814035][ T24] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 157.833210][ T6780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.846284][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.862720][ T24] usb 2-1: Product: syz [ 157.868623][ T24] usb 2-1: Manufacturer: syz [ 157.889712][ T24] usb 2-1: SerialNumber: syz [ 157.934929][ T24] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected [ 157.953913][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.008183][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.265883][ T24] usb 2-1: USB disconnect, device number 8 [ 158.588641][ T6779] vlan2: entered allmulticast mode [ 158.608798][ T6779] bridge0: port 3(vlan2) entered blocking state [ 158.626942][ T6779] bridge0: port 3(vlan2) entered disabled state [ 158.667518][ T6779] vlan2: entered promiscuous mode [ 158.689947][ T43] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.723580][ T43] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.759460][ T43] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.805697][ T43] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.838395][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 158.858842][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 160.117593][ T6816] netlink: 196 bytes leftover after parsing attributes in process `syz.0.219'. [ 160.792972][ T6824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.164454][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 161.192669][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 161.375970][ T6816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.394716][ T6816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.467990][ T6816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.557606][ T6816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.576796][ T6816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.609055][ T6816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.642471][ T6816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.691067][ T6816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.735991][ T6816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.760979][ T6816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.781850][ T6816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.822277][ T6816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.844952][ T6816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.860319][ T6816] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.898121][ T6816] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.146896][ T5705] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.154578][ T5684] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.321235][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 162.329514][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.344022][ T5684] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.344350][ T5705] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.365654][ T5684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.375074][ T5705] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.385638][ T5684] usb 2-1: config 0 descriptor?? [ 162.411356][ T5705] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.428973][ T5705] usb 3-1: config 1 interface 0 has no altsetting 0 [ 162.446714][ T5705] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 162.456003][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.467117][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.477805][ T5705] usb 3-1: Product: syz [ 162.485454][ T5705] usb 3-1: Manufacturer: syz [ 162.490485][ T5705] usb 3-1: SerialNumber: syz [ 162.516908][ T5714] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.616302][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.639089][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.678447][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.707116][ T5714] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.735017][ T5705] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 162.751958][ T5714] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 162.780263][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.816360][ T5714] usb 1-1: config 0 descriptor?? [ 162.904962][ T6844] netlink: 'syz.3.227': attribute type 22 has an invalid length. [ 162.949154][ T5705] usb 3-1: USB disconnect, device number 4 [ 162.975081][ T5705] usblp0: removed [ 163.221833][ T5684] usbhid 2-1:0.0: can't add hid device: -71 [ 163.235974][ T5684] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 163.264554][ T5684] usb 2-1: USB disconnect, device number 9 [ 163.382541][ T6846] loop8: detected capacity change from 0 to 7 [ 163.400424][ T6846] Dev loop8: unable to read RDB block 7 [ 163.406536][ T6846] loop8: unable to read partition table [ 163.434439][ T6846] loop8: partition table beyond EOD, truncated [ 163.444292][ T6846] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 163.569705][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.656930][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.680771][ T5684] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.756940][ T5714] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 163.816917][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.849114][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.874572][ T5684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.886951][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.913118][ T5684] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 163.935933][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.959181][ T5714] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.974503][ T5684] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.980299][ T5714] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 164.007061][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.032526][ T5714] usb 5-1: config 0 descriptor?? [ 164.050960][ T5714] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 164.068345][ T5714] dvb-usb: bulk message failed: -22 (3/0) [ 164.076297][ T5684] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 164.109102][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.130544][ T5714] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 164.148515][ T5714] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 164.161934][ T5684] usb 2-1: Product: syz [ 164.166665][ T5714] usb 5-1: media controller created [ 164.186112][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.198096][ T5684] usb 2-1: Manufacturer: syz [ 164.214412][ T5684] usb 2-1: SerialNumber: syz [ 164.303974][ T5714] dvb-usb: bulk message failed: -22 (6/0) [ 164.344057][ T5714] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 164.396209][ T5714] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 164.488318][ T5714] dvb-usb: schedule remote query interval to 150 msecs. [ 164.528986][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.559377][ T5714] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 164.594301][ T5714] usb 5-1: USB disconnect, device number 4 [ 164.654926][ T6860] No such timeout policy "syz0" [ 164.742549][ T5714] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 164.762567][ T6859] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 165.232409][ T5684] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 165.312883][ T5714] usb 1-1: USB disconnect, device number 5 [ 165.314215][ T5684] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 165.646956][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.727041][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.875108][ T5684] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 165.887829][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.966962][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.990028][ T5684] usb 2-1: USB disconnect, device number 10 [ 166.118893][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.606955][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.839205][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 166.870097][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 167.340413][ T6890] tipc: Started in network mode [ 167.373551][ T6890] tipc: Node identity 0aedc2c01895, cluster identity 4711 [ 167.443365][ T6890] tipc: Enabled bearer , priority 0 [ 167.598564][ T6890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.237'. [ 167.676725][ T6887] tipc: Resetting bearer [ 167.702342][ T6898] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.712221][ T6898] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.726851][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.808445][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.823133][ T6897] tipc: Started in network mode [ 167.850060][ T6897] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.914277][ T6897] tipc: Enabled bearer , priority 10 [ 167.967360][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.006337][ T6882] tipc: Disabling bearer [ 168.048436][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 168.336877][ T5684] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.438213][ T6901] tipc: Enabled bearer , priority 0 [ 168.497256][ T5684] usb 4-1: Using ep0 maxpacket: 16 [ 168.529035][ T5684] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.563254][ T5684] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.609172][ T5684] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.666149][ T5684] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.685653][ T5684] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 168.711088][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.726733][ T5684] usb 4-1: Product: syz [ 168.743768][ T5684] usb 4-1: Manufacturer: syz [ 168.754387][ T5684] usb 4-1: SerialNumber: syz [ 168.999609][ T5684] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 169.127831][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 169.216731][ T5684] usb 4-1: USB disconnect, device number 5 [ 169.229401][ T5684] usblp0: removed [ 169.428950][ T24] tipc: Node number set to 2886997162 [ 169.546985][ T5714] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.747897][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 169.757349][ T5714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.796790][ T5714] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 169.800384][ T6924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.244'. [ 170.000280][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.243'. [ 170.054497][ T6919] netlink: 260 bytes leftover after parsing attributes in process `syz.4.243'. [ 170.476278][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 170.527667][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 170.612112][ T6931] macsec1: entered promiscuous mode [ 170.635217][ T6931] macsec1: entered allmulticast mode [ 172.452607][ T5714] usb 5-1: string descriptor 0 read error: -71 [ 172.545006][ T5714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.584308][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.630819][ T5714] usb 5-1: can't set config #1, error -71 [ 172.664677][ T5714] usb 5-1: USB disconnect, device number 5 [ 173.681264][ T6969] input: syz0 as /devices/virtual/input/input10 [ 174.017120][ T5684] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.176945][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 174.201066][ T5684] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.234235][ T5684] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.263727][ T5684] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.287883][ T5684] usb 3-1: config 1 interface 0 has no altsetting 0 [ 174.320844][ T5684] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 174.343881][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.368712][ T5684] usb 3-1: Product: syz [ 174.385383][ T5684] usb 3-1: Manufacturer: syz [ 174.406194][ T5684] usb 3-1: SerialNumber: syz [ 174.644656][ T5684] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 174.866028][ T5684] usb 3-1: USB disconnect, device number 5 [ 174.892068][ T5684] usblp0: removed [ 175.417062][ T5714] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 175.489132][ T6997] netlink: 'syz.3.260': attribute type 6 has an invalid length. [ 175.608125][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 175.627996][ T5714] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 175.641007][ T5714] usb 1-1: config 0 has no interface number 0 [ 175.660641][ T5714] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 175.681069][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.691767][ T5714] usb 1-1: Product: syz [ 175.696167][ T5714] usb 1-1: Manufacturer: syz [ 175.705146][ T5714] usb 1-1: SerialNumber: syz [ 175.719253][ T5714] usb 1-1: config 0 descriptor?? [ 175.738568][ T5714] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 175.790771][ T7001] syzkaller0: entered promiscuous mode [ 175.817015][ T7001] syzkaller0: entered allmulticast mode [ 175.976641][ T5714] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 176.005283][ T5714] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 176.818011][ T5714] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.976890][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 176.991078][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.164866][ T5714] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 177.175541][ T5714] usb 4-1: config 13 has no interface number 0 [ 177.183728][ T5714] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.197316][ T5714] usb 4-1: config 13 interface 50 has no altsetting 0 [ 177.207490][ T5714] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 177.216985][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.225092][ T5714] usb 4-1: Product: syz [ 177.229722][ T5714] usb 4-1: Manufacturer: syz [ 177.234447][ T5714] usb 4-1: SerialNumber: syz [ 178.243019][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 178.244629][ T24] usb 1-1: USB disconnect, device number 6 [ 178.364322][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 178.432610][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 178.474932][ T24] quatech2 1-1:0.51: device disconnected [ 178.895528][ T7035] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 178.977414][ T5714] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.009136][ T5714] usb 4-1: MIDIStreaming interface descriptor not found [ 179.288089][ T5714] usb 4-1: USB disconnect, device number 6 [ 180.537637][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.727350][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 180.772264][ T9] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.804304][ T9] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.838730][ T9] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.872512][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 180.904587][ T9] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 180.925407][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.946892][ T9] usb 1-1: Product: syz [ 180.964678][ T9] usb 1-1: Manufacturer: syz [ 180.979754][ T9] usb 1-1: SerialNumber: syz [ 181.244052][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 181.575126][ T5714] usb 1-1: USB disconnect, device number 7 [ 181.610277][ T5714] usblp0: removed [ 181.776860][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.931175][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 181.944506][ T9] usb 4-1: config 4 has an invalid interface number: 196 but max is 0 [ 181.965617][ T9] usb 4-1: config 4 has no interface number 0 [ 181.997917][ T9] usb 4-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 182.023151][ T9] usb 4-1: config 4 interface 196 has no altsetting 0 [ 182.046454][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 182.065056][ T9] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 182.082936][ T9] usb 4-1: Product: syz [ 182.095061][ T9] usb 4-1: Manufacturer: syz [ 182.110035][ T9] usb 4-1: SerialNumber: syz [ 182.122873][ T7065] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.782927][ T9] ipheth 4-1:4.196: ipheth_enable_ncm: usb_control_msg: 0 [ 182.875250][ T9] ipheth 4-1:4.196: Apple iPhone USB Ethernet device attached [ 183.110937][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.151104][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.041056][ T807] usb 4-1: USB disconnect, device number 7 [ 184.080727][ T7097] xt_HMARK: proto mask must be zero with L3 mode [ 184.285449][ T807] ipheth 4-1:4.196: Apple iPhone USB Ethernet now disconnected [ 184.416322][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.599698][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 184.616578][ T9] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 184.634220][ T9] usb 5-1: config 0 has no interface number 0 [ 184.671528][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 184.702214][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 184.738245][ T9] usb 5-1: Product: syz [ 184.754354][ T9] usb 5-1: Manufacturer: syz [ 184.771211][ T9] usb 5-1: SerialNumber: syz [ 184.807017][ T9] usb 5-1: config 0 descriptor?? [ 186.061924][ T7131] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 186.100444][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 186.118529][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 186.894388][ T5684] usb 5-1: USB disconnect, device number 6 [ 187.606896][ T5684] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.797026][ T7150] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.801981][ T5684] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 187.820009][ T7153] bridge0: port 3(team0) entered blocking state [ 187.830281][ T7153] bridge0: port 3(team0) entered disabled state [ 187.845708][ T7153] team0: entered allmulticast mode [ 187.851761][ T7153] team_slave_0: entered allmulticast mode [ 187.878853][ T7153] team_slave_1: entered allmulticast mode [ 187.892019][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.922730][ T5684] usb 5-1: Product: syz [ 187.946100][ T5684] usb 5-1: Manufacturer: syz [ 187.965084][ T5684] usb 5-1: SerialNumber: syz [ 187.984050][ T5684] usb 5-1: config 0 descriptor?? [ 188.015549][ T5684] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 007 [ 188.104358][ T7153] team0: entered promiscuous mode [ 188.147819][ T7153] team_slave_0: entered promiscuous mode [ 188.171581][ T7153] team_slave_1: entered promiscuous mode [ 188.189481][ T7167] netlink: 164 bytes leftover after parsing attributes in process `syz.3.291'. [ 188.210794][ T7153] bridge0: port 3(team0) entered blocking state [ 188.218393][ T7153] bridge0: port 3(team0) entered forwarding state [ 188.237634][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 188.258667][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 188.258683][ T29] audit: type=1326 audit(1777300175.902:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 188.311942][ T29] audit: type=1326 audit(1777300175.912:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 188.343023][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 188.397901][ T29] audit: type=1326 audit(1777300175.942:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 188.492451][ T7158] tipc: Trying to set illegal importance in message [ 188.500271][ T5684] (null): failure reading functionality [ 188.507134][ T29] audit: type=1326 audit(1777300175.942:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 188.541024][ T5684] i2c i2c-1: connected i2c-tiny-usb device [ 188.581297][ T29] audit: type=1326 audit(1777300175.942:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 188.618359][ T29] audit: type=1326 audit(1777300175.942:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 188.727885][ T807] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.896920][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 188.925489][ T807] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 188.962445][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.996006][ T807] usb 3-1: Product: syz [ 189.016653][ T807] usb 3-1: Manufacturer: syz [ 189.035193][ T807] usb 3-1: SerialNumber: syz [ 189.053650][ T807] usb 3-1: config 0 descriptor?? [ 189.099311][ T7171] bridge0: port 3(batadv1) entered blocking state [ 189.107469][ T7171] bridge0: port 3(batadv1) entered disabled state [ 189.114103][ T7171] batadv1: entered allmulticast mode [ 189.121587][ T7171] batadv1: entered promiscuous mode [ 189.191965][ T9] usb 5-1: USB disconnect, device number 7 [ 189.263777][ T807] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 189.291320][ T807] ab 43 1e 80 9b f8 7a f0 [ 189.296943][ T807] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 189.596998][ T35] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 189.607520][ T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 189.878845][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 189.924795][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 190.512508][ T7193] syz.4.297 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.886884][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.086847][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 191.137551][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 191.182332][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.220363][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.262843][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.307949][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.368734][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.385244][ T807] usb 3-1: USB disconnect, device number 6 [ 191.413648][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.473790][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 191.725441][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 191.751369][ T9] usbtmc 5-1:16.0: can't read capabilities [ 192.016944][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.206971][ T9] usb 5-1: USB disconnect, device number 8 [ 192.253831][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.283333][ T24] usb 1-1: config 0 has no interface number 0 [ 192.381238][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 192.414262][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.441929][ T24] usb 1-1: Product: syz [ 192.456519][ T24] usb 1-1: Manufacturer: syz [ 192.483296][ T24] usb 1-1: SerialNumber: syz [ 192.505303][ T24] usb 1-1: config 0 descriptor?? [ 192.772747][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 192.814032][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.860786][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 192.925907][ T24] usb 1-1: media controller created [ 193.010842][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.024871][ T7203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.299'. [ 193.481494][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 194.307008][ T24] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 194.357294][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364520][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665860][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 194.748513][ T24] usb 1-1: USB disconnect, device number 8 [ 195.882401][ T7236] team_slave_1 (unregistering): left promiscuous mode [ 195.893447][ T137] wlan0: Trigger new scan to find an IBSS to join [ 195.939893][ T7236] team_slave_1 (unregistering): left allmulticast mode [ 196.011306][ T7236] team0: Port device team_slave_1 removed [ 196.441039][ T7253] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[7253] [ 197.996900][ T807] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.178248][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 198.224071][ T807] usb 4-1: config 0 has no interfaces? [ 198.278134][ T807] usb 4-1: config 0 has no interfaces? [ 198.314735][ T807] usb 4-1: config 0 has no interfaces? [ 198.336854][ T5705] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 198.361391][ T807] usb 4-1: config 0 has no interfaces? [ 198.382855][ T807] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 198.423971][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.504900][ T807] usb 4-1: config 0 descriptor?? [ 198.581143][ T5705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.621270][ T5705] usb 3-1: not running at top speed; connect to a high speed hub [ 198.669055][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.707123][ T5705] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 198.724713][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.754831][ T5705] usb 3-1: Product: syz [ 198.826030][ T5705] usb 3-1: Manufacturer: syz [ 198.841565][ T5705] usb 3-1: SerialNumber: syz [ 199.300272][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.313'. [ 199.380026][ T5705] usb 3-1: interface 3 not found [ 199.523132][ T5705] usb 3-1: USB disconnect, device number 7 [ 200.865904][ T24] usb 4-1: USB disconnect, device number 8 [ 200.928829][ T43] wlan0: Trigger new scan to find an IBSS to join [ 201.572749][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 201.617131][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 201.880635][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.008755][ T807] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.188793][ T807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.224147][ T807] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.273627][ T807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.297424][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.325581][ T807] usb 4-1: Product: syz [ 203.339088][ T807] usb 4-1: Manufacturer: syz [ 203.355610][ T807] usb 4-1: SerialNumber: syz [ 203.396209][ T807] cdc_ncm 4-1:1.0: skipping garbage [ 204.401600][ T807] cdc_ncm 4-1:1.0: bind() failure [ 204.424689][ T807] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 204.440272][ T807] cdc_ncm 4-1:1.1: bind() failure [ 204.685808][ T9] usb 4-1: USB disconnect, device number 9 [ 205.196391][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 205.559704][ T7355] capability: warning: `syz.1.331' uses 32-bit capabilities (legacy support in use) [ 206.446983][ T5705] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 206.638164][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 206.701545][ T5705] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.718031][ T5705] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 206.739829][ T5705] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.778146][ T5705] usb 1-1: config 1 interface 0 has no altsetting 0 [ 206.801383][ T5705] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 206.812376][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.829818][ T5705] usb 1-1: Product: syz [ 206.841118][ T5705] usb 1-1: Manufacturer: syz [ 206.858418][ T5705] usb 1-1: SerialNumber: syz [ 207.100257][ T5705] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 207.433960][ T5714] usb 1-1: USB disconnect, device number 9 [ 207.455665][ T5714] usblp0: removed [ 209.196876][ T5705] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 209.350922][ T5705] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 209.381982][ T5705] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.538484][ T5705] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.585255][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.646909][ T5705] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.998497][ T5705] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 211.430724][ T29] audit: type=1326 audit(1777300199.082:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.349" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f0701c code=0x0 [ 211.945963][ T807] usb 5-1: USB disconnect, device number 9 [ 212.085030][ T7438] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 7438 comm: syz.0.350) [ 212.124021][ T29] audit: type=1800 audit(1777300199.772:81): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.350" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=16028 res=0 errno=0 [ 212.156860][ T5714] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 212.229961][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 212.260948][ T7446] syzkaller0: entered promiscuous mode [ 212.267391][ T7446] syzkaller0: entered allmulticast mode [ 212.337189][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 212.356195][ T5714] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.377248][ T5714] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 212.413069][ T5714] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.455775][ T5714] usb 2-1: config 1 interface 0 has no altsetting 0 [ 212.507528][ T5714] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 212.538106][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.562434][ T5714] usb 2-1: Product: syz [ 212.575393][ T5714] usb 2-1: Manufacturer: syz [ 212.599407][ T5714] usb 2-1: SerialNumber: syz [ 212.832411][ T5714] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 212.946638][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 213.008354][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 213.157790][ T5714] usb 2-1: USB disconnect, device number 11 [ 213.196027][ T5714] usblp0: removed [ 214.925583][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 215.017755][ T7474] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.358' sets config #-1306435128 [ 215.070679][ T7474] netlink: 100 bytes leftover after parsing attributes in process `syz.3.358'. [ 215.109836][ T7474] netlink: 100 bytes leftover after parsing attributes in process `syz.3.358'. [ 215.950995][ T7476] ªªªªªª: renamed from vlan0 [ 218.116871][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 218.276867][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 218.293200][ T24] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.316310][ T24] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.367107][ T24] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.406054][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 218.456468][ T24] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 218.479772][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.494475][ T24] usb 2-1: Product: syz [ 218.511722][ T24] usb 2-1: Manufacturer: syz [ 218.530913][ T24] usb 2-1: SerialNumber: syz [ 218.828666][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 219.061728][ T5714] usb 2-1: USB disconnect, device number 12 [ 219.112903][ T5714] usblp0: removed [ 219.732606][ T7545] syzkaller0: entered promiscuous mode [ 219.759558][ T7545] syzkaller0: entered allmulticast mode [ 220.866489][ T7566] input: syz0 as /devices/virtual/input/input11 [ 221.367301][ T7573] bridge0: port 4(team0) entered blocking state [ 221.387095][ T7573] bridge0: port 4(team0) entered disabled state [ 221.475839][ T7573] team0: entered allmulticast mode [ 221.482611][ T7573] team_slave_0: entered allmulticast mode [ 221.876507][ T7580] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.226289][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.270420][ T7582] bond0: entered promiscuous mode [ 222.291873][ T7582] bond_slave_0: entered promiscuous mode [ 222.320973][ T7582] bond_slave_1: entered promiscuous mode [ 222.363050][ T7582] bond0: entered allmulticast mode [ 222.383998][ T7582] bond_slave_0: entered allmulticast mode [ 222.412198][ T7582] bond_slave_1: entered allmulticast mode [ 222.464325][ T7582] team0: Port device bond0 added [ 226.564673][ T7690] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.385'. [ 227.958558][ T7702] syzkaller0: entered promiscuous mode [ 227.970147][ T7702] syzkaller0: entered allmulticast mode [ 227.984365][ T7706] netlink: 'syz.0.389': attribute type 5 has an invalid length. [ 228.097195][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.389'. [ 228.158196][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.389'. [ 228.233155][ T7692] loop2: detected capacity change from 0 to 1 [ 228.857551][ T29] audit: type=1326 audit(1777300216.512:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 228.928380][ T29] audit: type=1326 audit(1777300216.532:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 228.981986][ T7711] netlink: 'syz.0.390': attribute type 20 has an invalid length. [ 229.035609][ T29] audit: type=1326 audit(1777300216.562:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 229.061600][ T7711] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.070709][ T29] audit: type=1326 audit(1777300216.562:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 229.150610][ T29] audit: type=1326 audit(1777300216.562:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 229.289376][ T29] audit: type=1326 audit(1777300216.642:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 229.390999][ T29] audit: type=1326 audit(1777300216.672:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 229.462180][ T29] audit: type=1326 audit(1777300216.682:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 229.536440][ T29] audit: type=1326 audit(1777300216.682:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 229.561941][ T29] audit: type=1326 audit(1777300216.712:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 233.291267][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 233.350491][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 234.405655][ T7783] program syz.4.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.080199][ T7790] syzkaller0: entered promiscuous mode [ 235.117689][ T7790] syzkaller0: entered allmulticast mode [ 235.244870][ T7799] syzkaller0: entered promiscuous mode [ 235.254856][ T7799] syzkaller0: entered allmulticast mode [ 235.767870][ T5705] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 235.951610][ T5705] usb 1-1: config 0 has no interfaces? [ 235.972824][ T5705] usb 1-1: string descriptor 0 read error: -22 [ 235.988994][ T5705] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 236.025482][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.069640][ T5705] usb 1-1: config 0 descriptor?? [ 236.574988][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.629666][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.758066][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.409'. [ 236.807379][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 238.989487][ T9] usb 1-1: USB disconnect, device number 10 [ 239.761074][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 239.785759][ T7841] netlink: 72 bytes leftover after parsing attributes in process `syz.0.416'. [ 240.309729][ T7857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.418'. [ 241.296889][ T5705] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 241.446905][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 241.461379][ T5705] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.472358][ T5705] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.513042][ T5705] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.552759][ T5705] usb 5-1: config 1 interface 0 has no altsetting 0 [ 241.603527][ T5705] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 241.616283][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.644361][ T5705] usb 5-1: Product: syz [ 241.667063][ T5705] usb 5-1: Manufacturer: syz [ 241.696467][ T5705] usb 5-1: SerialNumber: syz [ 241.931528][ T5705] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 242.222232][ T5705] usb 5-1: USB disconnect, device number 10 [ 242.260808][ T5705] usblp0: removed [ 242.450300][ T7877] syzkaller0: entered promiscuous mode [ 242.467003][ T7876] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 242.483176][ T7877] syzkaller0: entered allmulticast mode [ 242.654971][ T7884] syzkaller0: entered promiscuous mode [ 242.677411][ T7884] syzkaller0: entered allmulticast mode [ 242.897891][ T7887] netlink: 'syz.4.426': attribute type 10 has an invalid length. [ 243.266958][ T5705] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 243.427693][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 243.452145][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.501236][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.553233][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.595765][ T5705] usb 5-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 243.632684][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.670457][ T5705] usb 5-1: config 0 descriptor?? [ 243.711297][ T7891] tipc: Started in network mode [ 243.741845][ T7891] tipc: Node identity 02db61ae0c1a, cluster identity 4711 [ 243.775058][ T7891] tipc: Enabled bearer , priority 0 [ 243.802316][ T7892] syzkaller0: entered promiscuous mode [ 243.829702][ T7892] syzkaller0: entered allmulticast mode [ 244.095434][ T7890] tipc: Resetting bearer [ 244.224465][ T5705] hid-generic 0003:045E:FC40.0003: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.4-1/input0 [ 244.365172][ T7889] tipc: Resetting bearer [ 244.449671][ T7889] tipc: Disabling bearer [ 244.485768][ T7887] netlink: 'syz.4.426': attribute type 10 has an invalid length. [ 244.505543][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.426'. [ 244.547490][ T7887] team0: Port device geneve1 added [ 244.625542][ T5705] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 244.750324][ T5705] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 246.012741][ T5714] usb 5-1: USB disconnect, device number 11 [ 246.287239][ T5705] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 246.462767][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 246.483526][ T5705] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 246.495695][ T5705] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 246.515466][ T5705] usb 2-1: config 0 has no interface number 0 [ 246.525966][ T5705] usb 2-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.573091][ T7924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.586014][ T5705] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 246.614746][ T5705] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 246.643419][ T5705] usb 2-1: Product: syz [ 246.652415][ T5705] usb 2-1: Manufacturer: syz [ 246.695639][ T7923] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.713984][ T5705] usb 2-1: config 0 descriptor?? [ 246.965961][ T7926] geneve2: entered promiscuous mode [ 246.998136][ T7926] geneve2: entered allmulticast mode [ 247.666860][ T5684] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 247.876074][ T5684] usb 1-1: Using ep0 maxpacket: 16 [ 247.896633][ T5684] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.908357][ T5684] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.948385][ T5684] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.972219][ T5684] usb 1-1: config 1 interface 0 has no altsetting 0 [ 247.989808][ T5684] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 248.010184][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.096593][ T5684] usb 1-1: Product: syz [ 248.118527][ T5684] usb 1-1: Manufacturer: syz [ 248.133178][ T5684] usb 1-1: SerialNumber: syz [ 248.359245][ T5684] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 248.655597][ T5684] usb 1-1: USB disconnect, device number 11 [ 248.665010][ T5684] usblp0: removed [ 249.041802][ T7947] program syz.2.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.081631][ T7947] loop6: detected capacity change from 0 to 524287999 [ 249.130395][ T5684] usb 2-1: USB disconnect, device number 13 [ 250.048446][ T5714] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 250.274153][ T5714] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 250.308803][ T5714] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.367692][ T5714] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.406647][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.406889][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 250.509565][ T5714] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.667482][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 250.668495][ T5714] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 250.767738][ T24] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 250.801587][ T24] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 250.844454][ T24] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 250.872714][ T24] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 250.904268][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 250.930817][ T24] usb 5-1: config 0 has no interface number 0 [ 250.955185][ T24] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 250.991477][ T24] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 251.023176][ T24] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 251.052076][ T24] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.100552][ T24] usb 5-1: config 0 interface 125 has no altsetting 0 [ 251.124675][ T24] usb 5-1: config 0 interface 125 has no altsetting 2 [ 251.188837][ T24] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 251.231224][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.260393][ T24] usb 5-1: Product: syz [ 251.278471][ T24] usb 5-1: Manufacturer: syz [ 251.294989][ T24] usb 5-1: SerialNumber: syz [ 251.322756][ T24] usb 5-1: config 0 descriptor?? [ 251.353822][ T24] usb 5-1: selecting invalid altsetting 2 [ 251.789964][ T7980] netlink: 68 bytes leftover after parsing attributes in process `syz.0.445'. [ 252.448277][ T24] get_1284_register timeout [ 252.467120][ C1] usb 5-1: async_complete: urb error -104 [ 252.473063][ C1] usb 5-1: async_complete: urb error -104 [ 252.902603][ T24] usb 3-1: USB disconnect, device number 8 [ 253.130545][ T7992] xt_nat: multiple ranges no longer supported [ 253.329453][ T24] usb 5-1: USB disconnect, device number 12 [ 253.937749][ T8005] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 253.989126][ T8005] bridge0: port 4(team0) entered blocking state [ 253.997151][ T8005] bridge0: port 4(team0) entered disabled state [ 254.005080][ T8005] team0: entered allmulticast mode [ 254.010773][ T8005] team_slave_0: entered allmulticast mode [ 254.021632][ T8005] geneve1: entered allmulticast mode [ 254.245612][ T8005] team0: entered promiscuous mode [ 254.276422][ T8005] team_slave_0: entered promiscuous mode [ 254.796863][ T5705] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 255.015752][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 255.047852][ T8005] geneve1: entered promiscuous mode [ 255.063277][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.078920][ T5705] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 255.088294][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.118274][ T5705] usb 4-1: config 0 descriptor?? [ 255.126745][ T8009] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.217354][ T8005] bridge0: port 4(team0) entered blocking state [ 255.224968][ T8005] bridge0: port 4(team0) entered forwarding state [ 255.316959][ T807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 255.390892][ T8009] netlink: 4352 bytes leftover after parsing attributes in process `syz.3.451'. [ 255.402370][ T8009] openvswitch: netlink: Flow actions attr not present in new flow. [ 255.476876][ T807] usb 1-1: Using ep0 maxpacket: 16 [ 255.498728][ T807] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.526606][ T807] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.558313][ T807] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.595793][ T807] usb 1-1: config 1 interface 0 has no altsetting 0 [ 255.615337][ T807] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 255.631261][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.656625][ T807] usb 1-1: Product: syz [ 255.668592][ T807] usb 1-1: Manufacturer: syz [ 255.689865][ T807] usb 1-1: SerialNumber: syz [ 255.729788][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730400][ T5705] usbhid 4-1:0.0: can't add hid device: -71 [ 255.736286][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.778396][ T5705] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 255.810625][ T5705] usb 4-1: USB disconnect, device number 10 [ 255.917837][ T807] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 256.221577][ T9] usb 1-1: USB disconnect, device number 12 [ 256.238297][ T9] usblp0: removed [ 256.508344][ T8032] netlink: 'syz.4.456': attribute type 4 has an invalid length. [ 256.906912][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 257.099805][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 257.137942][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 257.182356][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.259040][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 257.291508][ T9] pvrusb2: ********** [ 257.311442][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 257.356283][ T9] pvrusb2: Important functionality might not be entirely working. [ 257.381201][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 257.422446][ T9] pvrusb2: ********** [ 257.483570][ T2362] pvrusb2: Invalid write control endpoint [ 257.676923][ T2362] pvrusb2: Invalid write control endpoint [ 257.711304][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 257.760070][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 257.797358][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 257.846411][ T2362] pvrusb2: Device being rendered inoperable [ 257.880742][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 257.909676][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 257.936463][ T2362] pvrusb2: Attached sub-driver cx25840 [ 257.958729][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 258.008868][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 258.397639][ T8056] netlink: 164 bytes leftover after parsing attributes in process `syz.2.460'. [ 259.648404][ T807] usb 5-1: USB disconnect, device number 13 [ 260.095978][ T8068] syzkaller0: entered promiscuous mode [ 260.125158][ T8068] syzkaller0: entered allmulticast mode [ 260.473170][ T8079] xt_nat: multiple ranges no longer supported [ 260.497214][ T807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 260.688647][ T807] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 260.710369][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.733248][ T807] usb 3-1: Product: syz [ 260.746544][ T807] usb 3-1: Manufacturer: syz [ 260.765222][ T807] usb 3-1: SerialNumber: syz [ 260.783477][ T807] usb 3-1: config 0 descriptor?? [ 260.806952][ T807] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 009 [ 261.013989][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 261.276463][ T8071] tipc: Trying to set illegal importance in message [ 261.285126][ T807] (null): failure reading functionality [ 261.310051][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 261.349457][ T807] i2c i2c-1: connected i2c-tiny-usb device [ 261.496615][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 261.515199][ T9] usb 1-1: config 0 has no interfaces? [ 261.553118][ T9] usb 1-1: config 0 has no interfaces? [ 261.579378][ T9] usb 1-1: config 0 has no interfaces? [ 261.604116][ T8071] bridge0: port 3(batadv1) entered blocking state [ 261.623934][ T9] usb 1-1: config 0 has no interfaces? [ 261.636238][ T8071] bridge0: port 3(batadv1) entered disabled state [ 261.651271][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 261.651430][ T8071] batadv1: entered allmulticast mode [ 261.697814][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.719984][ T8071] batadv1: entered promiscuous mode [ 261.736204][ T9] usb 1-1: config 0 descriptor?? [ 261.858088][ T5619] usb 3-1: USB disconnect, device number 9 [ 262.107915][ T1015] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 262.117459][ T1015] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 263.750183][ T8103] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 263.928643][ T24] usb 1-1: USB disconnect, device number 13 [ 264.116884][ T807] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 264.257362][ T5619] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.288547][ T807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 264.304436][ T807] usb 2-1: not running at top speed; connect to a high speed hub [ 264.319630][ T807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.344231][ T807] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 264.366311][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.391159][ T807] usb 2-1: Product: syz [ 264.401753][ T807] usb 2-1: Manufacturer: syz [ 264.411472][ T807] usb 2-1: SerialNumber: syz [ 264.436152][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 264.449252][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 264.475278][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.497564][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.543778][ T5619] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.593577][ T5619] usb 4-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 264.644078][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.674980][ T5619] usb 4-1: config 0 descriptor?? [ 264.762257][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 264.811543][ T807] usb 2-1: interface 3 not found [ 264.837006][ T807] usb 2-1: USB disconnect, device number 14 [ 265.188734][ T5619] hid-generic 0003:045E:FC40.0005: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.3-1/input0 [ 265.437188][ T8103] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 265.490919][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 265.562467][ T5714] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 265.610458][ T5714] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 265.722721][ T8103] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 265.754167][ T8103] team0: Failed to send options change via netlink (err -105) [ 265.796155][ T8132] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 265.805779][ T8103] team0: Port device geneve1 added [ 266.978400][ T807] usb 4-1: USB disconnect, device number 11 [ 268.104553][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 270.222955][ T8176] syzkaller0: entered promiscuous mode [ 270.250350][ T8176] syzkaller0: entered allmulticast mode [ 271.711980][ T8199] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 272.036891][ T807] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 272.226966][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 272.254292][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.283291][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.330368][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.379214][ T807] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 272.414470][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.459511][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 272.459529][ T29] audit: type=1326 audit(1777300260.102:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 272.525116][ T807] usb 2-1: config 0 descriptor?? [ 272.533051][ T29] audit: type=1326 audit(1777300260.102:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 272.606467][ T29] audit: type=1326 audit(1777300260.212:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711616b code=0x7ffc0000 [ 272.655289][ T29] audit: type=1326 audit(1777300260.222:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 272.727708][ T29] audit: type=1326 audit(1777300260.252:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 272.823692][ T29] audit: type=1326 audit(1777300260.252:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 272.894490][ T29] audit: type=1326 audit(1777300260.252:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 272.972138][ T29] audit: type=1326 audit(1777300260.252:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711616b code=0x7ffc0000 [ 273.054496][ T807] hid-generic 0003:045E:FC40.0007: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0 [ 273.102997][ T29] audit: type=1326 audit(1777300260.252:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 273.247419][ T29] audit: type=1326 audit(1777300260.252:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f1801c code=0x7ffc0000 [ 273.411611][ T8199] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 273.448534][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.490'. [ 273.490275][ T5705] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 273.514041][ T5705] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 273.771157][ T8199] geneve1: entered promiscuous mode [ 273.792759][ T8199] geneve1: entered allmulticast mode [ 273.807864][ T8199] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 273.830704][ T8199] team0: Failed to send options change via netlink (err -105) [ 273.849173][ T8199] team0: Port device geneve1 added [ 274.741038][ T8228] netlink: 'syz.0.494': attribute type 15 has an invalid length. [ 274.888488][ T8229] tipc: Enabled bearer , priority 10 [ 274.936234][ T8229] tipc: Enabled bearer , priority 0 [ 275.036219][ T9] usb 2-1: USB disconnect, device number 15 [ 275.156946][ T5619] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 275.353223][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 275.370389][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 275.388275][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 275.422287][ T5619] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 275.469470][ T5619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.505125][ T5619] usb 1-1: config 0 has no interface number 0 [ 275.530662][ T5619] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 275.551904][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.600181][ T5619] usb 1-1: Product: syz [ 275.614716][ T5619] usb 1-1: Manufacturer: syz [ 275.629000][ T5619] usb 1-1: SerialNumber: syz [ 275.659807][ T5619] usb 1-1: config 0 descriptor?? [ 275.690532][ T5619] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 275.935148][ T5619] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 275.955481][ T5619] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 276.056884][ T807] tipc: Node number set to 247554478 [ 277.804376][ T5705] usb 1-1: USB disconnect, device number 14 [ 279.161929][ T8277] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 281.405977][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 281.405993][ T29] audit: type=1326 audit(1777300269.052:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 281.506521][ T29] audit: type=1326 audit(1777300269.082:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 281.611984][ T29] audit: type=1326 audit(1777300269.092:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 281.698073][ T29] audit: type=1326 audit(1777300269.092:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 281.769294][ T29] audit: type=1326 audit(1777300269.092:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 281.880182][ T29] audit: type=1326 audit(1777300269.092:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 281.967420][ T29] audit: type=1326 audit(1777300269.092:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 282.032981][ T29] audit: type=1326 audit(1777300269.092:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 282.073851][ T8309] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 282.109042][ T8307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.124434][ T29] audit: type=1326 audit(1777300269.092:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 282.230890][ T29] audit: type=1326 audit(1777300269.502:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0701c code=0x7ffc0000 [ 282.566901][ T807] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 282.808990][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.836906][ T807] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.881168][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.939772][ T807] usb 3-1: config 0 descriptor?? [ 283.224982][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.241695][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.874898][ T807] usbhid 3-1:0.0: can't add hid device: -71 [ 283.887119][ T807] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 283.942727][ T807] usb 3-1: USB disconnect, device number 10 [ 285.702141][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 288.199982][ T8377] tipc: Enabled bearer , priority 0 [ 288.279051][ T8382] syzkaller0: entered promiscuous mode [ 288.306189][ T8382] syzkaller0: entered allmulticast mode [ 288.387925][ T8390] tipc: Resetting bearer [ 288.459485][ T8392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.747476][ T807] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 288.826190][ T8387] netlink: 44 bytes leftover after parsing attributes in process `syz.3.528'. [ 288.969460][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.981196][ T807] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.996910][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.031042][ T807] usb 5-1: config 0 descriptor?? [ 289.345140][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.439288][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.729068][ T8373] tipc: Resetting bearer [ 289.809981][ T8373] tipc: Disabling bearer [ 290.078144][ T807] usbhid 5-1:0.0: can't add hid device: -71 [ 290.105943][ T807] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 290.172581][ T807] usb 5-1: USB disconnect, device number 14 [ 293.686208][ T8443] program syz.3.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.733816][ T8443] loop6: detected capacity change from 0 to 524287999 [ 294.122228][ T8453] syzkaller0: entered promiscuous mode [ 294.161593][ T8453] syzkaller0: entered allmulticast mode [ 294.464409][ T8464] netlink: 'syz.3.547': attribute type 5 has an invalid length. [ 294.759298][ T8455] loop8: detected capacity change from 0 to 7 [ 294.828890][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 294.828907][ T29] audit: type=1326 audit(1777300282.482:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 294.897346][ T29] audit: type=1326 audit(1777300282.512:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 294.965670][ T8455] Dev loop8: unable to read RDB block 7 [ 294.985391][ T8455] loop8: unable to read partition table [ 295.012021][ T29] audit: type=1326 audit(1777300282.512:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf719616b code=0x7ffc0000 [ 295.046300][ T8455] loop8: partition table beyond EOD, truncated [ 295.088686][ T8455] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 295.114095][ T29] audit: type=1326 audit(1777300282.512:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 295.116909][ T807] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 295.215533][ T29] audit: type=1326 audit(1777300282.512:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 295.344512][ T29] audit: type=1326 audit(1777300282.512:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 295.410915][ T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.413688][ T29] audit: type=1326 audit(1777300282.512:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 295.558453][ T29] audit: type=1326 audit(1777300282.512:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 295.622567][ T807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.677106][ T807] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 295.700325][ T29] audit: type=1326 audit(1777300282.512:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 295.779575][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.817393][ T29] audit: type=1326 audit(1777300282.512:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 295.909968][ T807] usb 2-1: config 0 descriptor?? [ 295.921280][ T8485] ip6gre1: entered allmulticast mode [ 295.961908][ T807] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 295.983176][ T807] dvb-usb: bulk message failed: -22 (3/0) [ 296.062085][ T807] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 296.092934][ T807] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 296.112126][ T807] usb 2-1: media controller created [ 296.134866][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.165171][ T807] dvb-usb: bulk message failed: -22 (6/0) [ 296.181161][ T807] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 296.276460][ T807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 296.375705][ T807] dvb-usb: schedule remote query interval to 150 msecs. [ 296.406324][ T807] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 296.514811][ T807] usb 2-1: USB disconnect, device number 16 [ 296.642251][ T807] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.566595][ T8502] tipc: Started in network mode [ 297.577119][ T8502] tipc: Node identity ac14142f, cluster identity 4711 [ 297.602704][ T8502] tipc: New replicast peer: 0.0.0.0 [ 297.630411][ T8502] tipc: Enabled bearer , priority 10 [ 297.952590][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 297.983727][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 297.995461][ T8505] netlink: 'syz.0.552': attribute type 3 has an invalid length. [ 298.087359][ T5619] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 298.175544][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 298.206603][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 298.266867][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 298.274538][ T5619] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 298.285638][ T5619] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 298.306620][ T5619] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.364127][ T5619] usb 4-1: config 1 interface 0 has no altsetting 0 [ 298.417637][ T5619] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 298.436620][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.463452][ T5619] usb 4-1: Product: syz [ 298.471264][ T5619] usb 4-1: Manufacturer: syz [ 298.479864][ T5619] usb 4-1: SerialNumber: syz [ 298.616990][ T807] tipc: Node number set to 2886997039 [ 298.703420][ T5619] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 299.010124][ T807] usb 4-1: USB disconnect, device number 12 [ 299.039826][ T807] usblp0: removed [ 299.948792][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 300.058576][ T8543] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 300.129922][ T8543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.166889][ T5619] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 300.346859][ T5619] usb 2-1: Using ep0 maxpacket: 16 [ 300.360383][ T5619] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.387433][ T5619] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 300.413013][ T5619] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.455590][ T5619] usb 2-1: config 1 interface 0 has no altsetting 0 [ 300.493309][ T5619] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 300.515918][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.534436][ T5619] usb 2-1: Product: syz [ 300.543296][ T5619] usb 2-1: Manufacturer: syz [ 300.553127][ T5619] usb 2-1: SerialNumber: syz [ 300.798727][ T5619] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 301.111590][ T5619] usb 2-1: USB disconnect, device number 17 [ 301.161960][ T5619] usblp0: removed [ 301.948761][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 301.960326][ T8558] program syz.2.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.971234][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 302.563029][ T8555] program syz.1.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.607656][ T8555] loop6: detected capacity change from 0 to 524287999 [ 303.410908][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 303.430409][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 304.666845][ T5619] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 304.765665][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 304.803256][ T8597] netlink: 'syz.1.574': attribute type 4 has an invalid length. [ 304.828923][ T8597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.840792][ T5619] usb 1-1: Using ep0 maxpacket: 16 [ 304.876732][ T5619] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.894291][ T5619] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.913896][ T5619] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.940990][ T5619] usb 1-1: config 1 interface 0 has no altsetting 0 [ 304.972618][ T5619] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 304.993960][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.018608][ T5619] usb 1-1: Product: syz [ 305.029344][ T5619] usb 1-1: Manufacturer: syz [ 305.045213][ T5619] usb 1-1: SerialNumber: syz [ 305.294854][ T5619] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 305.631741][ T807] usb 1-1: USB disconnect, device number 15 [ 305.657770][ T807] usblp0: removed [ 307.077318][ T5705] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 307.284487][ T5705] usb 1-1: config 0 has no interfaces? [ 307.299599][ T5705] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 307.320885][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.340631][ T5705] usb 1-1: config 0 descriptor?? [ 307.561550][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 307.653973][ T8630] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 308.186885][ T807] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 308.304508][ T8635] netlink: 'syz.1.582': attribute type 15 has an invalid length. [ 308.392067][ T807] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.404683][ T807] usb 5-1: config 0 has no interface number 0 [ 308.425766][ T807] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 308.450375][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.470574][ T807] usb 5-1: Product: syz [ 308.498690][ T807] usb 5-1: Manufacturer: syz [ 308.523148][ T807] usb 5-1: SerialNumber: syz [ 308.542445][ T807] usb 5-1: config 0 descriptor?? [ 308.677117][ T5714] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 308.843779][ T807] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 308.867921][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 308.881035][ T807] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 308.902466][ T5714] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 308.922944][ T807] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 308.934562][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.964830][ T807] usb 5-1: media controller created [ 308.983763][ T5714] usb 2-1: config 0 has no interface number 0 [ 309.020901][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.042354][ T5714] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 309.066790][ T8627] netlink: 48 bytes leftover after parsing attributes in process `syz.4.581'. [ 309.077269][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.093627][ T5714] usb 2-1: Product: syz [ 309.100393][ T5714] usb 2-1: Manufacturer: syz [ 309.112732][ T5714] usb 2-1: SerialNumber: syz [ 309.148916][ T5714] usb 2-1: config 0 descriptor?? [ 309.180919][ T5714] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 309.500117][ T5714] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 309.531571][ T5714] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 309.606176][ T5714] usb 1-1: USB disconnect, device number 16 [ 309.742112][ T8637] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.580'. [ 310.128411][ T807] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 310.540469][ T807] usb 5-1: USB disconnect, device number 15 [ 311.501176][ T5714] usb 2-1: USB disconnect, device number 18 [ 312.183855][ T8658] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 312.487606][ T5714] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 312.666835][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 312.675242][ T8665] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 312.689880][ T5714] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.717665][ T5714] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 312.739239][ T5714] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.756912][ T5714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 312.805349][ T5714] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 312.823010][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.840571][ T5714] usb 5-1: Product: syz [ 312.859700][ T5714] usb 5-1: Manufacturer: syz [ 312.874721][ T5714] usb 5-1: SerialNumber: syz [ 313.109595][ T5714] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 313.267515][ T8670] ptrace attach of "./syz-executor exec"[5636] was attempted by "./syz-executor exec"[8670] [ 313.413101][ T5714] usb 5-1: USB disconnect, device number 16 [ 313.461846][ T5714] usblp0: removed [ 315.610967][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 315.657742][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 315.884746][ T8696] loop8: detected capacity change from 0 to 7 [ 316.025695][ T8696] Dev loop8: unable to read RDB block 7 [ 316.078235][ T8696] loop8: unable to read partition table [ 316.126944][ T5705] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 316.136943][ T8696] loop8: partition table beyond EOD, truncated [ 316.143228][ T8696] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 316.379785][ T5705] usb 5-1: config 0 has no interfaces? [ 316.386865][ T5619] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 316.436272][ T5705] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 316.463944][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.511335][ T5705] usb 5-1: config 0 descriptor?? [ 316.615182][ T5619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.669751][ T5619] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 316.733014][ T5619] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 316.775932][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.843112][ T5619] usb 1-1: config 0 descriptor?? [ 316.890680][ T5619] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 316.918966][ T5619] dvb-usb: bulk message failed: -22 (3/0) [ 316.955502][ T5619] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 316.990517][ T8718] netlink: 'syz.2.599': attribute type 28 has an invalid length. [ 317.028814][ T5619] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 317.054592][ T8718] netlink: 'syz.2.599': attribute type 3 has an invalid length. [ 317.055396][ T5619] usb 1-1: media controller created [ 317.069477][ T8718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.599'. [ 317.140474][ T5619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.168217][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.175097][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.220386][ T5619] dvb-usb: bulk message failed: -22 (6/0) [ 317.260641][ T5619] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 317.302992][ T5619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 317.355460][ T5619] dvb-usb: schedule remote query interval to 150 msecs. [ 317.387424][ T5619] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 317.457692][ T5619] usb 1-1: USB disconnect, device number 17 [ 317.548599][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 317.596050][ T24] dvb-usb: error while querying for an remote control event. [ 317.851977][ T5619] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 318.448939][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 319.056290][ T8735] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 319.288113][ T5714] usb 5-1: USB disconnect, device number 17 [ 322.009165][ T8769] program syz.0.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.919913][ T8780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3415132644 (218568489216 ns) > initial count (61062497600 ns). Using initial count to start timer. [ 322.965575][ T8780] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2628609631/2628609633 [ 322.992730][ T8780] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2628609631/2628609632 [ 323.039397][ T8781] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2628609631/2628609633 [ 323.116787][ T8781] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2628609631/2628609632 [ 324.332203][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 324.404666][ T8791] loop8: detected capacity change from 0 to 7 [ 324.451413][ T8791] Dev loop8: unable to read RDB block 7 [ 324.477444][ T8791] loop8: unable to read partition table [ 324.543522][ T8791] loop8: partition table beyond EOD, truncated [ 324.574155][ T8791] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 324.574448][ T8806] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 324.797252][ T5684] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 324.809895][ T5714] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 325.062098][ T5684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.091198][ T5714] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.121232][ T5684] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 325.146985][ T5714] usb 2-1: config 0 has no interface number 0 [ 325.166608][ T5684] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 325.214145][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.243955][ T5684] usb 4-1: config 0 descriptor?? [ 325.267053][ T5684] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 325.286694][ T5684] dvb-usb: bulk message failed: -22 (3/0) [ 325.309139][ T5714] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 325.336070][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.363004][ T5684] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 325.393607][ T5684] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 325.409352][ T5684] usb 4-1: media controller created [ 325.430216][ T5714] usb 2-1: Product: syz [ 325.443966][ T5684] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.470716][ T5714] usb 2-1: Manufacturer: syz [ 325.500655][ T5684] dvb-usb: bulk message failed: -22 (6/0) [ 325.515857][ T5714] usb 2-1: SerialNumber: syz [ 325.544105][ T5714] usb 2-1: config 0 descriptor?? [ 325.571112][ T5684] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 325.664768][ T5684] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 325.747417][ T5684] dvb-usb: schedule remote query interval to 150 msecs. [ 325.769894][ T5684] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 325.894862][ T5714] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 325.912761][ T5684] usb 4-1: USB disconnect, device number 13 [ 325.927877][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 325.933691][ T5619] dvb-usb: error while querying for an remote control event. [ 326.029791][ T5714] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 326.116171][ T8801] ------------[ cut here ]------------ [ 326.123197][ T8801] refcount_t: addition on 0; use-after-free. [ 326.129226][ T8801] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#1: syz.1.616/8801 [ 326.139146][ T8801] Modules linked in: [ 326.144301][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.1.616 Not tainted syzkaller #0 PREEMPT(full) [ 326.153625][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.163741][ T8801] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 326.170041][ T8801] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 bb d1 13 fd 48 8d 3d c4 9f 89 0b 67 48 0f b9 3a eb 4a e8 a8 d1 13 fd 48 8d 3d c1 9f 89 0b <67> 48 0f b9 3a eb 37 e8 95 d1 13 fd 48 8d 3d be 9f 89 0b 67 48 0f [ 326.189726][ T8801] RSP: 0000:ffffc90003597738 EFLAGS: 00010287 [ 326.195810][ T8801] RAX: ffffffff84b1d208 RBX: 0000000000000002 RCX: 0000000000080000 [ 326.203833][ T8801] RDX: ffffc9000f8a3000 RSI: 0000000000000843 RDI: ffffffff903b71d0 [ 326.211913][ T8801] RBP: 0000000000000000 R08: ffff88807c1a9ec0 R09: 0000000000000005 [ 326.219951][ T8801] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c973988 [ 326.228018][ T8801] R13: dffffc0000000000 R14: ffff8880596391a0 R15: dffffc0000000000 [ 326.236001][ T8801] FS: 0000000000000000(0000) GS:ffff888125393000(0063) knlGS:00000000f53fbb40 [ 326.244967][ T8801] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 326.247257][ T5714] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 326.251588][ T8801] CR2: 0000000080026018 CR3: 0000000025612000 CR4: 00000000003526f0 [ 326.267660][ T8801] Call Trace: [ 326.270957][ T8801] [ 326.273897][ T8801] kobject_get+0xfa/0x120 [ 326.278266][ T8801] i2c_get_adapter+0x6d/0xa0 [ 326.282849][ T8801] i2cdev_open+0x48/0x180 [ 326.287238][ T8801] chrdev_open+0x4cd/0x5e0 [ 326.291669][ T8801] ? __pfx_chrdev_open+0x10/0x10 [ 326.296617][ T8801] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 326.302987][ T8801] ? __pfx_chrdev_open+0x10/0x10 [ 326.307931][ T8801] do_dentry_open+0x785/0x14e0 [ 326.312695][ T8801] vfs_open+0x3b/0x340 [ 326.316800][ T8801] ? path_openat+0x2df0/0x3860 [ 326.321560][ T8801] path_openat+0x2e08/0x3860 [ 326.326142][ T8801] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.331356][ T8801] ? finish_task_switch+0x41f/0xbe0 [ 326.336538][ T8801] ? trace_sched_exit_tp+0x3a/0x130 [ 326.341746][ T8801] ? __pfx_path_openat+0x10/0x10 [ 326.346705][ T8801] do_file_open+0x23e/0x4a0 [ 326.351255][ T8801] ? __pfx___schedule+0x10/0x10 [ 326.356096][ T8801] ? __pfx_do_file_open+0x10/0x10 [ 326.361136][ T8801] ? rcu_is_watching+0x15/0xb0 [ 326.365904][ T8801] ? _raw_spin_unlock+0x3f/0x50 [ 326.370981][ T8801] ? alloc_fd+0x64b/0x6c0 [ 326.375303][ T8801] do_sys_openat2+0x113/0x200 [ 326.380076][ T8801] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.385293][ T8801] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.390522][ T8801] __ia32_compat_sys_openat+0x131/0x160 [ 326.396065][ T8801] do_int80_emulation+0x181/0x530 [ 326.401144][ T8801] ? asm_int80_emulation+0x1a/0x20 [ 326.406257][ T8801] ? clear_bhb_loop+0x40/0x90 [ 326.410950][ T8801] ? clear_bhb_loop+0x40/0x90 [ 326.415613][ T8801] asm_int80_emulation+0x1a/0x20 [ 326.420762][ T8801] RIP: 0023:0xf718616b [ 326.425000][ T8801] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 326.444815][ T8801] RSP: 002b:00000000f53fb03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 326.453473][ T8801] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53fb100 [ 326.461626][ T8801] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.469837][ T8801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.477982][ T8801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 326.486029][ T8801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.494408][ T8801] [ 326.497644][ T8801] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 326.504941][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.1.616 Not tainted syzkaller #0 PREEMPT(full) [ 326.514159][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.524237][ T8801] Call Trace: [ 326.527547][ T8801] [ 326.530469][ T8801] vpanic+0x56c/0xa60 [ 326.534442][ T8801] ? __pfx__printk+0x10/0x10 [ 326.539018][ T8801] ? __pfx_vpanic+0x10/0x10 [ 326.543506][ T8801] ? is_bpf_text_address+0x292/0x2b0 [ 326.548777][ T8801] ? is_bpf_text_address+0x26/0x2b0 [ 326.554079][ T8801] panic+0xc5/0xd0 [ 326.557787][ T8801] ? __pfx_panic+0x10/0x10 [ 326.562201][ T8801] __warn+0x315/0x4c0 [ 326.566170][ T8801] ? refcount_warn_saturate+0x9f/0x110 [ 326.571620][ T8801] ? refcount_warn_saturate+0x9f/0x110 [ 326.577068][ T8801] __report_bug+0x29a/0x540 [ 326.581559][ T8801] ? refcount_warn_saturate+0x9f/0x110 [ 326.587006][ T8801] ? __pfx___report_bug+0x10/0x10 [ 326.592017][ T8801] ? __mutex_lock+0x319/0x1550 [ 326.596764][ T8801] report_bug_entry+0x19a/0x290 [ 326.601596][ T8801] ? refcount_warn_saturate+0x9f/0x110 [ 326.607038][ T8801] ? refcount_warn_saturate+0xa4/0x110 [ 326.612483][ T8801] handle_bug+0xce/0x200 [ 326.616708][ T8801] exc_invalid_op+0x1a/0x50 [ 326.621193][ T8801] asm_exc_invalid_op+0x1a/0x20 [ 326.626048][ T8801] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 326.632103][ T8801] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 bb d1 13 fd 48 8d 3d c4 9f 89 0b 67 48 0f b9 3a eb 4a e8 a8 d1 13 fd 48 8d 3d c1 9f 89 0b <67> 48 0f b9 3a eb 37 e8 95 d1 13 fd 48 8d 3d be 9f 89 0b 67 48 0f [ 326.651744][ T8801] RSP: 0000:ffffc90003597738 EFLAGS: 00010287 [ 326.657811][ T8801] RAX: ffffffff84b1d208 RBX: 0000000000000002 RCX: 0000000000080000 [ 326.665761][ T8801] RDX: ffffc9000f8a3000 RSI: 0000000000000843 RDI: ffffffff903b71d0 [ 326.673749][ T8801] RBP: 0000000000000000 R08: ffff88807c1a9ec0 R09: 0000000000000005 [ 326.681713][ T8801] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c973988 [ 326.689665][ T8801] R13: dffffc0000000000 R14: ffff8880596391a0 R15: dffffc0000000000 [ 326.697622][ T8801] ? refcount_warn_saturate+0x98/0x110 [ 326.703086][ T8801] ? refcount_warn_saturate+0x98/0x110 [ 326.708552][ T8801] kobject_get+0xfa/0x120 [ 326.712867][ T8801] i2c_get_adapter+0x6d/0xa0 [ 326.717442][ T8801] i2cdev_open+0x48/0x180 [ 326.721754][ T8801] chrdev_open+0x4cd/0x5e0 [ 326.726162][ T8801] ? __pfx_chrdev_open+0x10/0x10 [ 326.731078][ T8801] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 326.737478][ T8801] ? __pfx_chrdev_open+0x10/0x10 [ 326.742392][ T8801] do_dentry_open+0x785/0x14e0 [ 326.747144][ T8801] vfs_open+0x3b/0x340 [ 326.751193][ T8801] ? path_openat+0x2df0/0x3860 [ 326.755944][ T8801] path_openat+0x2e08/0x3860 [ 326.760543][ T8801] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.765723][ T8801] ? finish_task_switch+0x41f/0xbe0 [ 326.770917][ T8801] ? trace_sched_exit_tp+0x3a/0x130 [ 326.776097][ T8801] ? __pfx_path_openat+0x10/0x10 [ 326.781032][ T8801] do_file_open+0x23e/0x4a0 [ 326.785520][ T8801] ? __pfx___schedule+0x10/0x10 [ 326.790351][ T8801] ? __pfx_do_file_open+0x10/0x10 [ 326.795532][ T8801] ? rcu_is_watching+0x15/0xb0 [ 326.800286][ T8801] ? _raw_spin_unlock+0x3f/0x50 [ 326.805118][ T8801] ? alloc_fd+0x64b/0x6c0 [ 326.809444][ T8801] do_sys_openat2+0x113/0x200 [ 326.814104][ T8801] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.819288][ T8801] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.824474][ T8801] __ia32_compat_sys_openat+0x131/0x160 [ 326.830004][ T8801] do_int80_emulation+0x181/0x530 [ 326.835100][ T8801] ? asm_int80_emulation+0x1a/0x20 [ 326.840289][ T8801] ? clear_bhb_loop+0x40/0x90 [ 326.844947][ T8801] ? clear_bhb_loop+0x40/0x90 [ 326.849602][ T8801] asm_int80_emulation+0x1a/0x20 [ 326.854528][ T8801] RIP: 0023:0xf718616b [ 326.858592][ T8801] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 326.878189][ T8801] RSP: 002b:00000000f53fb03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 326.886611][ T8801] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53fb100 [ 326.894685][ T8801] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.902643][ T8801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.910595][ T8801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 326.918597][ T8801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.926573][ T8801] [ 326.930274][ T8801] Kernel Offset: disabled [ 326.934604][ T8801] Rebooting in 86400 seconds..